Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
File: F531B47AC60411ECA41C213BC4F9AE02.roa (raw, json)
Hash identifier: YLLKgDlYYJNFMSVf2wjq/vOvn6SkKxyB5SXkor8d0zc=
Subject key identifier: E8:1B:3E:BA:72:2A:F6:67:47:78:5E:ED:ED:53:75:44:8E:7A:0D:46
Certificate issuer: /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial: 02
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
Signing time: Wed 27 Apr 2022 08:35:14 +0000
ROA not before: Wed 27 Apr 2022 08:35:14 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 132742
IP address blocks: 43.243.240.0/22 maxlen: 22
103.39.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110650, serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Validity
Not Before: Apr 27 08:35:14 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62690042-21fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:1e:58:b5:5f:8b:2f:76:53:bc:2c:f0:3b:
d6:0c:a6:34:b4:77:27:bc:48:c3:c6:44:91:9a:5d:
d9:fe:28:0f:ec:e7:92:2d:94:70:20:8b:98:81:76:
66:c7:6e:b8:c3:92:a2:5e:cc:3a:23:a3:ec:36:8b:
4e:db:73:cd:c3:d0:e1:3b:22:27:96:0f:ac:05:14:
38:e6:8f:fb:2f:49:7f:ad:5f:ca:95:7d:84:d7:0b:
47:9c:ef:6b:d1:e0:c4:12:ab:d6:fc:ac:4c:78:50:
92:36:2b:96:04:95:7a:c4:53:e1:95:60:64:4c:1f:
58:7e:67:e6:89:b7:b8:0a:72:7d:d7:65:1a:8f:01:
5b:55:12:cf:21:40:6b:2a:fa:06:2f:3d:a1:c2:ec:
6c:80:f7:c9:25:63:7a:14:4e:26:1e:d2:95:7c:b0:
52:2e:29:d2:c6:97:e7:f4:e1:3e:2c:bc:49:7e:bd:
e0:26:7e:c8:d6:58:b5:9a:19:a1:0b:d3:38:4e:00:
f2:77:d6:9a:a6:ea:31:63:4b:01:87:46:79:95:f1:
81:ea:e9:5e:87:bb:c3:91:fb:7f:b2:7c:86:c1:4d:
ef:fc:8d:a4:d6:87:2f:56:6b:1f:bd:89:de:99:07:
3d:c5:33:44:e9:4f:51:0d:af:74:83:a5:35:42:df:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:3E:BA:72:2A:F6:67:47:78:5E:ED:ED:53:75:44:8E:7A:0D:46
X509v3 Authority Key Identifier:
keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.240.0/22
103.39.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:32:a9:ec:f0:e1:f4:ef:1a:14:8e:e5:a0:08:a0:f3:9e:b2:
f7:0a:f3:93:c8:bf:75:5c:9f:c2:be:f5:bf:3e:d3:9c:24:09:
13:7b:34:5b:42:25:76:d7:90:89:02:99:cd:55:5a:2f:aa:e1:
0f:6a:4b:79:c0:79:d7:7d:5d:74:89:28:d8:d2:fd:ef:fb:a8:
74:a4:ae:f5:f6:34:86:be:b1:67:ce:40:3e:70:2d:32:c6:07:
98:bc:67:07:5f:e5:d2:0d:e0:26:d0:97:06:9d:e7:df:d4:6a:
27:cf:8d:d7:8c:fe:73:ad:a0:48:f8:c4:e2:e7:72:15:8e:54:
14:40:09:72:eb:98:0c:61:fd:2c:89:09:ac:73:d6:49:39:04:
bd:e8:9f:4f:1a:3f:ab:99:c4:24:ac:7f:c4:53:09:31:e8:ec:
7e:2c:1e:34:48:1f:18:8f:23:b7:d3:ea:f7:a0:2e:43:ef:b2:
9d:5e:e3:21:1f:b7:6d:cd:ff:ce:5e:07:84:16:48:eb:51:f1:
ec:8d:b9:e7:9b:7b:8f:99:15:cb:13:a1:5e:73:4b:4a:30:ef:
f0:95:94:91:21:92:56:87:22:52:8a:b4:b4:7e:cd:8d:c6:2e:
8e:fb:06:32:e0:6c:34:fb:59:39:5b:ad:2d:ed:2b:06:72:4b:
06:ca:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:29:50 2025 by rpki-client